Recent submissions

Comment · 3 days ago
I understand this has uses outside of HTTP request methods/verbs, but it's not a great example as you can invent new ones for your RESTful service.
Comment · 4 days ago
I mean, yeah, I kind of expected/assumed/wanted that. Isn't that the whole point? It's going to be difficult to debug a bad session if someone can't easily read the conversation.
Comment · 26 days ago
Because no single person or entity can own it.
Comment · 1 month ago
It looks like that phrase was removed from the article, but that is standard for C-level jobs. When you resign, you're shown the door immediately. The same thing happened with Marissa Mayer when she left Google during a phone call. Call was ended and her accesses terminated. Can't risk any additional trade secrets leaving.
Comment · 1 month ago
[flagged]
Comment · 1 month ago
> Quick way to lose your luxury and loyal customers IMO.

Unfortunately, not true. Very, very, very few people are going to abandon the years of work they've put into using iOS and macOS because of a few pesky ads. Sure, they'll complain about it, but they won't actually switch.

Comment · 1 month ago
I use Codex extensively, but mostly as a sounding board for architectural questions. I'll also have it do a lot of boilerplate work, but damn, I don't get these people creating multiple Claude or Codex accounts to burn tokens all day. I still love writing code!
Comment · 1 month ago
I thought Laravel would've been the one to scoop them up, but I'm glad they landed with Shopify. Adam's a solid dude and what him and his team have done to commoditize web design is to be lauded.

To think it started as a side project and grew to the scale it did. Very impressive work.

Comment · 2 months ago
I remember reading it in 2006 or so to better understand pathfinding algorithms for my data structures and algorithms class.
Comment · 2 months ago
Absolutely agree. I could easily afford to hire a lawn crew to cut my lawn, but I enjoy doing it every weekend or two for similar reasons. I have a little under half an acre to mow, but I still enjoy doing it manually with a push mower.

Gets me outside and moving, accomplishes something tangible, can catch up on a podcast or two or just get lost in my thoughts, often leads to fixing other odds and ends around the house I've put off.

Comment · 2 months ago
I suppose I'm spoiled by the Symfony framework which has a robust Secrets Component [0].

It allows you to generate a public/private key for each environment: test, dev, and prod (by default). The 'prod' private key can't be committed to the repository. Once the cryptographic keys are generated, you can encrypt any secret you want, and the framework will automatically decrypt it and allow you to access it as an environment variable at runtime.

The encrypted values for all environments are committed to the repository. For example, the file for the `$STRIPE_SECRET_KEY` environment variable for the 'dev' environment is a file that has these contents (shortened for readability):

    <?php // dev.STRIPE_SECRET_KEY.c33678

    return "\x1Dq\x11B6\x5B\xFE7\x9B\xA4\xFE...";
This solves several problems:

1. Keys for the 'dev' and 'test' environments can easily be shared with the team because their public and private keys values are committed to the repository. No more sharing secrets file over Slack or through some other mechanism.

2. The private key for the 'prod' environment can be stored in a 3rd party vault so it can be made available to the production servers. You can also decrypt 'prod' secrets during deployment to reduce the decryption overhead for each request.

3. At worst, agents would have access to the secrets in the 'test' and 'dev' environments only because they couldn't decrypt 'prod' values locally.

4. It forces good practices to ensure you're not using the same secret value for production and non-production environments.

It's made secret management so easy I don't even give it a second thought. Do other web frameworks support a system like this?

[0] https://symfony.com/doc/current/configuration/secrets.html

Comment · 3 months ago
Not the OP, nor do I have any relationship to them, but I've had to build or maintain plenty of these in my time and sure, an LLM can knock out a basic one easily, but there are so many edge cases that need to be accounted for that it gets complex quickly.

Congrats on the launch - this looks like a genuinely useful tool. I look forward to checking it out.

Comment · 3 months ago
I have absolutely no relationship with OpenAI but maybe give it some time before drawing such a conclusion.
Comment · 6 months ago
Is it spying if:

1. It's anonymous

2. They're telling you they're doing it

3. You can opt out of it

Comment · 7 months ago
Does this have a CLI only interface?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton